Safety & privacy
Technology that understands how delicate the information inside it is.
Privacy here is not a policy page. It is how the product is built: where data lives, who can see it, what the AI is allowed to receive, and what happens when she says delete.

- 01Guest-first
The core product works with no account at all. Only live Refuel AI asks her to sign in.
- 02Local-first
Check-ins, notes, recovery and journal stay on the device by default. A backend outage never blocks a check-in.
- 03Permission-aware
A partner's access is not access to everything. A nanny's access is narrower still. Family participation never turns her private world into shared family data.
- 04Safety before AI
Deterministic safety logic has authority over the generative layer. It runs first, and no model can overrule it.
- 05Export
She can take her authorised data with her in a tap.
- 06Delete everything
Delete means delete: on the device, in the cloud, and on every shared surface. A deletion epoch prevents an offline device from resurrecting old data.
Safety before AI.
- 01Crisis language
Handled on the device, in English and Ukrainian, and never sent to a model. The safety rules are documented for clinical review and versioned.
- 02Professional support
Clear routes to midwives, doctors and crisis lines. Mommy Refuel is a wellbeing product, not an emergency service.
- 03Doctor Visit Mode
A calm, structured summary of the week to bring to a real appointment, prepared by her, shared by her.
- 04No advertising
No ad SDKs, no cross-app tracking. Analytics can never carry a score, a mood or a symptom.
Straight answers
Does my partner see my journal or cycle?
No. Those are private, user-owned data. A partner's role gives access to the baby and shared family tasks, never to your journal, cycle, recovery notes or AI conversations, unless you explicitly choose to share.
What does the AI actually send off my device?
Only when you use it: a minimised, structured summary and the message you type. Private notes and journal text are never sent. Crisis text is handled on the device and never reaches the model.
Is anything sold or used for ads?
Never. There are no advertising SDKs and no cross-app tracking.
What happens when I delete my account?
Everything is removed, locally and server-side, and a deletion epoch advances so a device that was offline cannot restore old data later.
Is Mommy Refuel a medical device?
No. It is a wellbeing and family-organisation product. It does not diagnose and its safety rules are a draft pending clinical sign-off before public release.
If you are in crisis, please reach out now.
Mommy Refuel is not an emergency service. If you or your baby are in danger, or you are having thoughts of harming yourself, contact your local emergency number or a crisis line immediately. You deserve real, human help, right away.